Malicious PDF — malware analysis report

Static analysis result for SHA-256 1e6122bb8129ac77…

MALICIOUS

PDF

12.6 KB Created: 2019-04-30 04:06:31 +01:00 Authoring application: mPDF 5.7
MD5: 2014fa5f5cbf0e6bcd0cd0b831b666da SHA-1: 0880292a94528231bd8042c06a08114d46ec1ba4 SHA-256: 1e6122bb8129ac772da7dd183dad12f71dae12f89df054691d93b4d964c452d3
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external PDF files, hosted on the domain loaminoo.linkpc.net. This pattern is indicative of a link farm or a phishing lure, aiming to direct users to potentially malicious content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8780

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3099091094098091/Timeless-Timeless-1-by-Alexandra-Monir.pdf
    • http://loaminoo.linkpc.net/3097092096098/Timeless-Timeless-1-by-Alexandra-Monir.pdf
    • http://loaminoo.linkpc.net/3091093097093094/Timeless-Timeless-1-by-Alexandra-Monir.pdf
    • http://loaminoo.linkpc.net/1099096093099093/The-Timeless-Land-The-Timeless-Land-Trilogy-1-by-Eleanor-Dark.pdf
    • http://loaminoo.linkpc.net/1095091094096093/The-Final-Six-by-Alexandra-Monir.pdf
    • http://loaminoo.linkpc.net/4090098092090099/Suspicion-by-Alexandra-Monir.pdf
    • http://loaminoo.linkpc.net/7096091098093/Suspicion-by-Alexandra-Monir.pdf
    • http://loaminoo.linkpc.net/3097097097097095/Timeless-by-Rachel-Spangler.pdf
    • http://loaminoo.linkpc.net/1091099090095093098/Thursday-Timeless-4-by-E-L-Todd.pdf
    • http://loaminoo.linkpc.net/3096094091095092/As-Timeless-As-Stone-by-Maeve-Alpin.pdf
    • http://loaminoo.linkpc.net/3092091099098095/Timeless-Passion-by-Constance-O-39-Day-Flannery.pdf
    • http://loaminoo.linkpc.net/6095098093093/Halo-of-the-Sun-Timeless-5-by-Laura-Kreitzer.pdf
    • http://loaminoo.linkpc.net/7090092097090098/Timeless-Living-Handbook-by-Wim-Pauwels.pdf
    • http://loaminoo.linkpc.net/3092094099096098/Shadow-of-the-Sun-Timeless-1-by-Laura-Kreitzer.pdf
    • http://loaminoo.linkpc.net/2099098096091093/Timeless-Desire-by-Lucy-Felthouse.pdf
    • http://loaminoo.linkpc.net/4095097093097099/Timeless-by-Pamela-Diane-King.pdf
    • http://loaminoo.linkpc.net/4094095090092098/Timeless-Mist-by-Terisa-Wilcox.pdf
    • http://loaminoo.linkpc.net/9096092098098/A-Timeless-Abandon-by-Collin-Pearman.pdf
    • http://loaminoo.linkpc.net/1091096095090091/Timeless-Parasol-Protectorate-5-by-Gail-Carriger.pdf
    • http://loaminoo.linkpc.net/1091094097095099/Timeless-Night-New-Camelot-1-by-Torie-N-James.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.